Do all the things like ++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatarSign Up
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple APILearn More
Jilano30671261dI usually cry myself to sleep.
Condor34794261dEvery time I do Windows management, I make sure my fridge is filled with booze... Preparations for a good day. Have a backup fridge just in case.
zymk1201261dLol, these things suck ass when they crop up. I'm not 100% sure of all the underlying pieces, but usually managing domain joined systems is a hell of a lot easier to work on because the OS grants more permissive rights to domain admins. just a side note, on windows 10 both home and pro, even if your user account is in the local administrators security group, I've run into weird permissions issues that I was ONLY able to circumvent by switching to the built-in 'administrator' user account or by joining the system to a domain and using a domain admin account to troubleshoot.
So on my gaming PC I don't have a user account, I just setup a user for the sake of setting a password and enabling the administrator user. Then I switch over to using the builtin account and deleting the user account oobe forces us to setup.
sbiewald4290261d1. Take ownership of all files
2. Remove all permissions
3. Enable permission inheritance.
4. Set the permission on this folder (with permissions enabled for subfolders and files)
Generally, this permission scheme (permissions with inheritance) is the default (with some exceptions).
I have no idea how to solve it with icacls.
Aldar1104261d@zymk Never thought about doing that. I guess on desktops, I still stick with "working under root = bad". And I have no idea how domain-joined PC administration works either I'm a simple linux admin. Most we use is LDAP and that is still only to manage users/groups and stuff...
@sbiewald Fails on the first step - Cannot take ownership of one of the files, meaning I cannot delete the higher up directories because they are not empty. Meaning I cannot even reset ACLs because I do not own the file.